What is the right way to import a .p8 key? Getting DataError instead of success

[michaelaflores]

I'm attempting to generate a JWT to use with Apple WeatherKit. Following their docs, I first download a private key from developer.apple.com. That downloads a .p8 file. I attempt to use it like so:

// Copy the key from AuthKey.p8
      const pkcs8 = `-----BEGIN PRIVATE KEY-----
		my key here
		-----END PRIVATE KEY-----`
const privateKey = await jose.importPKCS8(pkcs8, 'ES256')

I believe the key is formatted correctly, as modifying it generates a different error that it must be a "PCKS8 formatted string". However, as it is, I get an error when calling importPKCS8: DataError: Data provided to an operation does not meet requirements. I don't understand what requirement is not being met from this error, so I'm wondering what the right way is to use this key?

TL;DR as the answer is in a reply thread, this doesn't work on Safari 15.5. You can try re-exporting as JWK and then importing that instead.

[panva]

I believe the key is formatted correctly, as modifying it generates a different error that it must be a "PCKS8 formatted string"

That's a very rudimentary check just checking the input is a string and that the envelope is correct for a PKCS8 key.

I am unfamiliar with what's inside apple's .p8 keys, so if you'd like more help, generate a fresh private key, paste it here, and then delete it because it's no longer going to be private.

In essence, actual code to reproduce.

[panva]

No this is a P-256 key. That being said, I cannot do much about browser deficits.

You can re-export the key as JWK and try to import that, the jwk format is generally more portable than pkcs8

[michaelaflores]

Gotcha. Appreciate the help @panva 🙏🏼

[panva]

And indeed JWK import works fine in Safari where it also failed for me with pkcs8.

[panva]

JWK is also generally easier to work with, when you'd like to get the public key imported, just remove the d key parameter.

[michaelaflores]

This is very new to me so this was super helpful, appreciate it!

[josephjoeljo]

I am running into this unfortunately. Apple only exports p8 files now. Latest Safari is getting the same issue. Chrome seems fine.